Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
File:                     7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft (raw, json)
Hash identifier:          qEfXYzOFpGAQ/Km2DWKAWvxv4jFOrG8DBmni7TaHwhc=
Subject key identifier:   8C:4B:80:E5:81:2B:8A:CB:33:92:66:C3:0B:87:B9:9E:2F:14:29:3A
Authority key identifier: EE:0B:D0:EA:95:A1:90:C7:03:A8:5E:09:EB:C5:E5:FD:A5:CD:CE:32
Certificate issuer:       /CN=ee0bd0ea95a190c703a85e09ebc5e5fda5cdce32
Certificate serial:       01A13F022FAF9F36E278FEF3FC2ACD26B749
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
Manifest number:          1AA9
Signing time:             Thu 15 Oct 2026 10:01:10 +0000
Manifest this update:     Thu 15 Oct 2026 10:01:10 +0000
Manifest next update:     Fri 16 Oct 2026 10:01:10 +0000
Files and hashes:         1: 7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl (hash: 5738+yME8Ntwzh8S/BTdul9bGqI5L51EJStExzt6Qyg=)
                          2: Ds44zfxwoX0zZ-7ulrX3xVDM_S4.roa (hash: m7dxG9EvyLpUsK5NhHcjeFergHlbX9Ot5AbzRhpjiiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:02:2f:af:9f:36:e2:78:fe:f3:fc:2a:cd:26:b7:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee0bd0ea95a190c703a85e09ebc5e5fda5cdce32
        Validity
            Not Before: Oct 15 10:01:10 2026 GMT
            Not After : Oct 16 10:01:10 2026 GMT
        Subject: CN=8c4b80e5812b8acb339266c30b87b99e2f14293a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e2:0f:0f:28:69:24:44:7a:f9:8c:d7:e2:d3:
                    24:c9:86:82:18:92:6f:52:56:c1:37:a4:74:0f:7b:
                    c3:36:b1:29:1b:9b:cf:61:1b:dd:10:be:e7:65:e7:
                    3d:2c:8f:14:39:ff:e8:c4:69:0e:ef:7c:16:aa:89:
                    8c:59:33:82:74:fd:5f:e7:3f:8c:e8:ed:f6:bb:27:
                    f2:6f:ec:86:59:66:86:bb:6d:90:d7:f2:c5:de:d8:
                    e6:d1:11:7a:4e:c0:a0:6c:91:1a:94:35:3b:d2:d6:
                    ad:9a:36:6f:35:f1:45:ea:1b:32:13:6f:a3:06:04:
                    59:d1:c1:0b:62:86:79:19:d7:40:0b:41:13:0e:fe:
                    cb:7f:cd:ce:db:b2:dd:e0:e4:71:99:1c:65:cc:64:
                    a3:38:f3:a7:7c:a7:22:52:3b:f0:e8:df:79:05:6c:
                    82:c0:bb:55:fa:15:2c:05:f7:e7:cd:ad:3b:f2:ba:
                    4e:5b:da:9c:8c:bf:48:ce:21:90:63:4f:6d:9d:02:
                    26:b3:c0:77:c0:00:b9:ec:c1:92:40:83:0f:a2:75:
                    74:24:d5:70:d7:d7:68:46:b6:11:a1:44:16:f0:18:
                    ee:e1:98:6c:ef:b9:5f:0e:10:93:80:11:83:63:d1:
                    2e:5f:12:18:3d:8f:69:a1:a0:2c:e6:b6:08:60:14:
                    bb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4B:80:E5:81:2B:8A:CB:33:92:66:C3:0B:87:B9:9E:2F:14:29:3A
            X509v3 Authority Key Identifier:
                keyid:EE:0B:D0:EA:95:A1:90:C7:03:A8:5E:09:EB:C5:E5:FD:A5:CD:CE:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/0d5d9f-5808-4871-a24d-bebdf4cd485b/1/7gvQ6pWhkMcDqF4J68Xl_aXNzjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:4e:0f:de:80:95:a8:9b:5e:9f:b8:00:de:fc:33:39:d4:a8:
         a8:47:79:2f:a1:5d:72:e7:d6:2f:b8:88:28:7e:7d:69:a4:8d:
         63:ea:f0:5a:55:a8:fb:ef:81:4b:1c:8f:d0:c4:00:93:c6:98:
         8b:11:af:db:6c:9f:b8:a4:c3:b7:6b:bb:0c:06:df:5c:2d:62:
         2a:fb:0c:b9:6b:23:b8:d2:df:95:9b:d7:ba:00:8b:00:06:fc:
         88:a4:35:dd:e4:63:04:d4:b8:dd:f4:0b:d3:c0:1c:38:0e:aa:
         96:c1:71:1c:a7:e7:d3:5d:d3:d3:19:18:b0:9a:3b:cc:d4:f3:
         db:42:69:0b:6e:28:4b:ed:8e:11:28:7d:f6:5b:b0:6a:2c:ce:
         52:42:3e:b0:c2:2e:9d:c3:15:39:d7:73:17:a1:5b:bd:0a:33:
         92:ee:13:b6:ad:6f:49:c7:81:b4:00:05:15:b4:32:df:0d:88:
         aa:7a:de:1c:eb:47:c2:67:1a:e1:ef:eb:31:2c:19:f3:fc:3d:
         53:4e:f7:f3:9f:00:46:20:bd:27:9f:0b:35:bd:76:d3:38:72:
         43:f3:bb:6e:e8:5e:8c:21:fe:05:2f:f4:0d:d6:ed:6a:24:db:
         e3:96:82:5d:1b:50:06:70:d7:a2:d0:e1:f9:86:5b:98:a6:58:
         30:f6:a2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:22:58 2026 by rpki-client